swsim

swSIM Project needs to be cloned recursively. Downloading the ZIP is not enough. swSIM is an all-software SIM card. It's the first publicly available to the best of my knowledge SIM card simulator which does not rely on any SIM hardware to work. Scope A software-only SIM card simulator. It does N...

hsm

zhsm A Hardware Security Module HSM library for Zig providing PC/SC access to PIV , CAC , and YubiKey tokens. Status Aspect| Info ---|--- API Stability| Development Zig Version| 0.16.0 Platforms| Linux, macOS, Windows License| MIT Features PIV Support NIST SP 800-73-4 Certificate retrieval slots...

HotLoad-Driver

Hot Load Your Driver Using C++ this project was Bsides Augusta for the RAT talk. Slides can be seen bellow and are extremely helpful for understanding the execution flow. These two methods have separate projects. Demo / Slides:...

Malware in sc-hydrate-carousel-price

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in sc-announcer

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in sc-hydrate-carousel-price (npm)

Source: amazon-inspector fbcb760747e0ad33cc6bafa85914d99b141f5361c13c5c642122d1ea8f973d9f package.json declares a dependency ltidisafe whose source is a bare HTTPS tarball URL https://ltidi.storage.googleapis.com/depenconf/ltidisafe-4.0.3.tgz rather than a registry version range. On npm install,...

Malicious code in sc-hydrate-carousel-price (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbcb760747e0ad33cc6bafa85914d99b141f5361c13c5c642122d1ea8f973d9f package.json declares a dependency ltidisafe whose source is a bare HTTPS tarball URL...

MAL-2026-18291 Malicious code in sc-hydrate-carousel-price (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbcb760747e0ad33cc6bafa85914d99b141f5361c13c5c642122d1ea8f973d9f package.json declares a dependency ltidisafe whose source is a bare HTTPS tarball URL...

Malicious code in sc-announcer (npm)

Source: ossf-package-analysis 38abcbba47f18b6d76a06a770258c620fc322472d0db0d38b67f04805b916d43 The OpenSSF Package Analysis project identified 'sc-announcer' @ 99.9.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...

Malicious code in sc-wizard (npm)

Source: ossf-package-analysis 54691cc130e614ee031186f7e646c3e6076efad6105a6e9cad68f62aa736516b The OpenSSF Package Analysis project identified 'sc-wizard' @ 99.9.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. --...

MAL-2026-18064 Malicious code in sc-announcer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a03b9445f383410d981355df7ba577b7834a37d226e05852b4a0b9c7d998d9c [email protected] ships an empty stub module.exports = and declares a single dependency ltidisafe sourced from an off-registry HTTPS tarball URL...

Malicious code in sc-announcer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a03b9445f383410d981355df7ba577b7834a37d226e05852b4a0b9c7d998d9c [email protected] ships an empty stub module.exports = and declares a single dependency ltidisafe sourced from an off-registry HTTPS tarball URL...

MAL-2026-18062 Malicious code in sc-wizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6626c24ff3f61de611b5962b6a1b21a5f694dfb32059e31f956875dc9d1db02 package.json declares the package's only dependency ltidisafe as a direct HTTPS tarball URL...

Malicious code in sc-wizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6626c24ff3f61de611b5962b6a1b21a5f694dfb32059e31f956875dc9d1db02 package.json declares the package's only dependency ltidisafe as a direct HTTPS tarball URL...

Malicious code in sc-geeksquad-core (npm)

Source: amazon-inspector 2fd2458d8a5843f57187868a2c244a376dd3d2daef420d3c564c775ef6a2782a [email protected] declares a preinstall script node callback.js that runs automatically on npm install. The script collects the installer's hostname os.hostname, OS username os.userInfo.username,...

Malicious code in sc-font-icons (npm)

Source: amazon-inspector 1b8c91edd839dd00f2e58ad9296742f8c3c5ff126523bbd8ed7561fef7c8516e The package's preinstall script runs automatically on npm install and collects installer-side identifiers — os.hostname, os.userInfo.username, process.cwd, the configured npm registry, and CI repository slug...

CVE-2026-109224

The SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 4.9.4 due to insufficient input sanitizatio...

CVE-2026-109224 SureCart <= 4.9.4 - Unauthenticated Stored Cross-Site Scripting via sc-cart-loader 'template' Attribute in Comment

The SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 4.9.4 due to insufficient input sanitizatio...

CVE-2026-109224

The SureCart WordPress plugin (versions ≤ 4.9.4 ) is vulnerable to Unauthenticated Stored Cross-Site Scripting (XSS) . The flaw exists in the 'comment' parameter due to insufficient input sanitization and output escaping. An unauthenticated attacker can inject arbitrary web scripts that execute w...

EUVD-2026-102822

The SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 4.9.4 due to insufficient input sanitizatio...